必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:
类型 评论内容 时间
attack
2019-12-24T08:35:05.079942shield sshd\[14637\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.117  user=root
2019-12-24T08:35:07.385037shield sshd\[14637\]: Failed password for root from 106.13.112.117 port 52792 ssh2
2019-12-24T08:37:58.038623shield sshd\[15319\]: Invalid user merry from 106.13.112.117 port 41240
2019-12-24T08:37:58.043247shield sshd\[15319\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.117
2019-12-24T08:37:59.765922shield sshd\[15319\]: Failed password for invalid user merry from 106.13.112.117 port 41240 ssh2
2019-12-24 20:38:53
attackbotsspam
Brute force SMTP login attempted.
...
2019-12-23 15:47:11
attackbotsspam
Dec 21 20:51:41 hpm sshd\[31271\]: Invalid user occ0724 from 106.13.112.117
Dec 21 20:51:41 hpm sshd\[31271\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.117
Dec 21 20:51:44 hpm sshd\[31271\]: Failed password for invalid user occ0724 from 106.13.112.117 port 59144 ssh2
Dec 21 20:57:58 hpm sshd\[31925\]: Invalid user test from 106.13.112.117
Dec 21 20:57:58 hpm sshd\[31925\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.117
2019-12-22 15:09:51
attackbotsspam
Dec 19 06:23:10 localhost sshd\[19626\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.117  user=mysql
Dec 19 06:23:12 localhost sshd\[19626\]: Failed password for mysql from 106.13.112.117 port 35446 ssh2
Dec 19 06:29:51 localhost sshd\[19864\]: Invalid user shown from 106.13.112.117 port 33424
Dec 19 06:29:51 localhost sshd\[19864\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.117
Dec 19 06:29:53 localhost sshd\[19864\]: Failed password for invalid user shown from 106.13.112.117 port 33424 ssh2
...
2019-12-19 14:53:03
attackbotsspam
Dec 16 23:14:24 MK-Soft-VM3 sshd[20684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.117 
Dec 16 23:14:26 MK-Soft-VM3 sshd[20684]: Failed password for invalid user pentriumII from 106.13.112.117 port 54218 ssh2
...
2019-12-17 08:37:11
attackbots
Dec 12 00:48:22 dedicated sshd[17444]: Invalid user ftpuser from 106.13.112.117 port 55706
2019-12-12 08:07:19
attack
Dec 10 03:26:50 hpm sshd\[26434\]: Invalid user Amazon@123 from 106.13.112.117
Dec 10 03:26:50 hpm sshd\[26434\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.117
Dec 10 03:26:52 hpm sshd\[26434\]: Failed password for invalid user Amazon@123 from 106.13.112.117 port 41172 ssh2
Dec 10 03:34:25 hpm sshd\[27180\]: Invalid user abc123 from 106.13.112.117
Dec 10 03:34:25 hpm sshd\[27180\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.117
2019-12-10 21:38:21
attackspam
Lines containing failures of 106.13.112.117
Nov 27 04:13:18 shared05 sshd[31551]: Invalid user Kauno from 106.13.112.117 port 54520
Nov 27 04:13:18 shared05 sshd[31551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.117
Nov 27 04:13:19 shared05 sshd[31551]: Failed password for invalid user Kauno from 106.13.112.117 port 54520 ssh2
Nov 27 04:13:19 shared05 sshd[31551]: Received disconnect from 106.13.112.117 port 54520:11: Bye Bye [preauth]
Nov 27 04:13:19 shared05 sshd[31551]: Disconnected from invalid user Kauno 106.13.112.117 port 54520 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=106.13.112.117
2019-11-29 01:20:00
attackbots
Nov 24 07:48:36 ms-srv sshd[57933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.117
Nov 24 07:48:39 ms-srv sshd[57933]: Failed password for invalid user endbenutzer from 106.13.112.117 port 38264 ssh2
2019-11-24 18:33:10
相同子网IP讨论:
IP 类型 评论内容 时间
106.13.112.221 attackspambots
SSH Brute Force
2020-10-14 06:22:15
106.13.112.221 attack
Time:     Mon Sep 21 00:09:18 2020 +0000
IP:       106.13.112.221 (CN/China/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 21 00:02:02 3 sshd[22815]: Invalid user vncuser from 106.13.112.221 port 58838
Sep 21 00:02:03 3 sshd[22815]: Failed password for invalid user vncuser from 106.13.112.221 port 58838 ssh2
Sep 21 00:05:36 3 sshd[23659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.221  user=root
Sep 21 00:05:38 3 sshd[23659]: Failed password for root from 106.13.112.221 port 34822 ssh2
Sep 21 00:09:15 3 sshd[24544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.221  user=root
2020-09-21 18:08:49
106.13.112.221 attack
Sep 14 20:52:28 web1 sshd[18049]: Invalid user cx from 106.13.112.221 port 58842
Sep 14 20:52:28 web1 sshd[18049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.221
Sep 14 20:52:28 web1 sshd[18049]: Invalid user cx from 106.13.112.221 port 58842
Sep 14 20:52:30 web1 sshd[18049]: Failed password for invalid user cx from 106.13.112.221 port 58842 ssh2
Sep 14 21:01:41 web1 sshd[21718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.221  user=root
Sep 14 21:01:43 web1 sshd[21718]: Failed password for root from 106.13.112.221 port 34234 ssh2
Sep 14 21:05:11 web1 sshd[23129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.221  user=root
Sep 14 21:05:13 web1 sshd[23129]: Failed password for root from 106.13.112.221 port 48436 ssh2
Sep 14 21:08:42 web1 sshd[24727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh 
...
2020-09-15 01:49:48
106.13.112.221 attackspam
Sep 14 08:27:25 nuernberg-4g-01 sshd[29381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.221 
Sep 14 08:27:27 nuernberg-4g-01 sshd[29381]: Failed password for invalid user tates from 106.13.112.221 port 51960 ssh2
Sep 14 08:28:42 nuernberg-4g-01 sshd[29770]: Failed password for root from 106.13.112.221 port 37826 ssh2
2020-09-14 17:34:42
106.13.112.221 attackspam
2020-09-07T15:04:07.008324vps-d63064a2 sshd[25927]: User root from 106.13.112.221 not allowed because not listed in AllowUsers
2020-09-07T15:04:08.972910vps-d63064a2 sshd[25927]: Failed password for invalid user root from 106.13.112.221 port 45974 ssh2
2020-09-07T15:07:19.090762vps-d63064a2 sshd[25960]: Invalid user peu01 from 106.13.112.221 port 49050
2020-09-07T15:07:19.101048vps-d63064a2 sshd[25960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.221
2020-09-07T15:07:19.090762vps-d63064a2 sshd[25960]: Invalid user peu01 from 106.13.112.221 port 49050
2020-09-07T15:07:21.070626vps-d63064a2 sshd[25960]: Failed password for invalid user peu01 from 106.13.112.221 port 49050 ssh2
...
2020-09-08 01:10:16
106.13.112.221 attackspambots
$f2bV_matches
2020-09-07 16:35:46
106.13.112.221 attackbotsspam
SSH Invalid Login
2020-08-30 07:47:17
106.13.112.221 attackspambots
Aug 27 15:14:17 home sshd[1545280]: Invalid user sandbox from 106.13.112.221 port 46400
Aug 27 15:14:17 home sshd[1545280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.221 
Aug 27 15:14:17 home sshd[1545280]: Invalid user sandbox from 106.13.112.221 port 46400
Aug 27 15:14:18 home sshd[1545280]: Failed password for invalid user sandbox from 106.13.112.221 port 46400 ssh2
Aug 27 15:17:56 home sshd[1546330]: Invalid user testuser from 106.13.112.221 port 54898
...
2020-08-27 23:58:14
106.13.112.221 attack
Aug 20 14:02:03 ip106 sshd[26734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.221 
Aug 20 14:02:04 ip106 sshd[26734]: Failed password for invalid user hardware from 106.13.112.221 port 39504 ssh2
...
2020-08-21 02:08:36
106.13.112.221 attackspambots
Tried sshing with brute force.
2020-07-31 07:45:16
106.13.112.221 attackbots
Jul 28 07:29:32 vpn01 sshd[24383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.221
Jul 28 07:29:35 vpn01 sshd[24383]: Failed password for invalid user jakubr from 106.13.112.221 port 45420 ssh2
...
2020-07-28 17:18:05
106.13.112.221 attack
2020-07-21T11:11:44.527353afi-git.jinr.ru sshd[16836]: Invalid user sshuser from 106.13.112.221 port 41908
2020-07-21T11:11:44.530607afi-git.jinr.ru sshd[16836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.221
2020-07-21T11:11:44.527353afi-git.jinr.ru sshd[16836]: Invalid user sshuser from 106.13.112.221 port 41908
2020-07-21T11:11:46.363145afi-git.jinr.ru sshd[16836]: Failed password for invalid user sshuser from 106.13.112.221 port 41908 ssh2
2020-07-21T11:15:44.013421afi-git.jinr.ru sshd[17791]: Invalid user bj from 106.13.112.221 port 59980
...
2020-07-21 16:52:07
106.13.112.221 attackspam
Jul 16 11:18:32 master sshd[14574]: Failed password for invalid user admin from 106.13.112.221 port 45140 ssh2
Jul 16 11:30:57 master sshd[15171]: Failed password for invalid user nginxtcp from 106.13.112.221 port 46844 ssh2
Jul 16 11:35:58 master sshd[15246]: Failed password for invalid user ashar from 106.13.112.221 port 46906 ssh2
Jul 16 11:40:31 master sshd[15381]: Failed password for invalid user www from 106.13.112.221 port 46954 ssh2
Jul 16 11:45:13 master sshd[15484]: Failed password for invalid user admin from 106.13.112.221 port 47014 ssh2
Jul 16 11:49:55 master sshd[15554]: Failed password for invalid user alexis from 106.13.112.221 port 47064 ssh2
Jul 16 11:54:37 master sshd[15653]: Failed password for invalid user nginx from 106.13.112.221 port 47124 ssh2
Jul 16 11:59:04 master sshd[15713]: Failed password for invalid user bio from 106.13.112.221 port 47172 ssh2
Jul 16 12:03:43 master sshd[16189]: Failed password for invalid user noah from 106.13.112.221 port 47228 ssh2
2020-07-16 19:42:31
106.13.112.221 attackbotsspam
Jun 17 04:09:33 rush sshd[1730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.221
Jun 17 04:09:36 rush sshd[1730]: Failed password for invalid user nagios from 106.13.112.221 port 59302 ssh2
Jun 17 04:12:45 rush sshd[1885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.221
...
2020-06-17 12:13:23
106.13.112.221 attackbots
2020-06-14T14:06:08.330411shield sshd\[22332\]: Invalid user sse from 106.13.112.221 port 50202
2020-06-14T14:06:08.334014shield sshd\[22332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.221
2020-06-14T14:06:10.380175shield sshd\[22332\]: Failed password for invalid user sse from 106.13.112.221 port 50202 ssh2
2020-06-14T14:08:53.345513shield sshd\[22995\]: Invalid user admin from 106.13.112.221 port 51452
2020-06-14T14:08:53.349449shield sshd\[22995\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.221
2020-06-15 03:14:35
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.112.117
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12153
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.112.117.			IN	A

;; AUTHORITY SECTION:
.			328	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112400 1800 900 604800 86400

;; Query time: 159 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Nov 24 18:33:05 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
Host 117.112.13.106.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 117.112.13.106.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
117.121.214.50 attackspambots
Dec 24 17:05:53 srv-ubuntu-dev3 sshd[118387]: Invalid user test2 from 117.121.214.50
Dec 24 17:05:53 srv-ubuntu-dev3 sshd[118387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.121.214.50
Dec 24 17:05:53 srv-ubuntu-dev3 sshd[118387]: Invalid user test2 from 117.121.214.50
Dec 24 17:05:54 srv-ubuntu-dev3 sshd[118387]: Failed password for invalid user test2 from 117.121.214.50 port 60118 ssh2
Dec 24 17:08:48 srv-ubuntu-dev3 sshd[118652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.121.214.50  user=root
Dec 24 17:08:51 srv-ubuntu-dev3 sshd[118652]: Failed password for root from 117.121.214.50 port 55956 ssh2
Dec 24 17:11:30 srv-ubuntu-dev3 sshd[119083]: Invalid user squid from 117.121.214.50
Dec 24 17:11:30 srv-ubuntu-dev3 sshd[119083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.121.214.50
Dec 24 17:11:30 srv-ubuntu-dev3 sshd[119083]: Invalid user 
...
2019-12-25 00:35:21
112.85.42.171 attackbots
$f2bV_matches
2019-12-25 00:18:02
222.186.173.180 attack
Dec 24 13:33:12 firewall sshd[30620]: Failed password for root from 222.186.173.180 port 28296 ssh2
Dec 24 13:33:26 firewall sshd[30620]: error: maximum authentication attempts exceeded for root from 222.186.173.180 port 28296 ssh2 [preauth]
Dec 24 13:33:26 firewall sshd[30620]: Disconnecting: Too many authentication failures [preauth]
...
2019-12-25 00:39:27
113.184.153.124 attack
Dec 24 16:35:24 jane sshd[5164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.184.153.124 
Dec 24 16:35:26 jane sshd[5164]: Failed password for invalid user admin from 113.184.153.124 port 58350 ssh2
...
2019-12-25 00:26:38
218.92.0.179 attackspam
Dec 24 17:07:42 dcd-gentoo sshd[14137]: User root from 218.92.0.179 not allowed because none of user's groups are listed in AllowGroups
Dec 24 17:07:44 dcd-gentoo sshd[14137]: error: PAM: Authentication failure for illegal user root from 218.92.0.179
Dec 24 17:07:42 dcd-gentoo sshd[14137]: User root from 218.92.0.179 not allowed because none of user's groups are listed in AllowGroups
Dec 24 17:07:44 dcd-gentoo sshd[14137]: error: PAM: Authentication failure for illegal user root from 218.92.0.179
Dec 24 17:07:42 dcd-gentoo sshd[14137]: User root from 218.92.0.179 not allowed because none of user's groups are listed in AllowGroups
Dec 24 17:07:44 dcd-gentoo sshd[14137]: error: PAM: Authentication failure for illegal user root from 218.92.0.179
Dec 24 17:07:44 dcd-gentoo sshd[14137]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.179 port 39782 ssh2
...
2019-12-25 00:12:07
103.12.246.10 attackbots
RDPBruteCAu24
2019-12-25 00:08:48
106.12.154.17 attack
Dec 24 15:45:30 raspberrypi sshd\[25777\]: Invalid user clain from 106.12.154.17Dec 24 15:45:32 raspberrypi sshd\[25777\]: Failed password for invalid user clain from 106.12.154.17 port 36324 ssh2Dec 24 15:54:04 raspberrypi sshd\[26550\]: Invalid user gaiger from 106.12.154.17
...
2019-12-25 00:22:19
109.229.248.206 attackspambots
23/tcp 2323/tcp 37215/tcp...
[2019-11-19/12-24]20pkt,3pt.(tcp)
2019-12-25 00:36:16
14.186.197.193 attack
Dec 24 16:35:08 jane sshd[4983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.186.197.193 
Dec 24 16:35:10 jane sshd[4983]: Failed password for invalid user admin from 14.186.197.193 port 49165 ssh2
...
2019-12-25 00:45:53
196.179.234.98 attack
Dec 24 17:07:41 lnxmysql61 sshd[10333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.179.234.98
Dec 24 17:07:41 lnxmysql61 sshd[10333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.179.234.98
2019-12-25 00:35:01
213.32.6.117 attackspam
3389BruteforceFW23
2019-12-25 00:31:40
196.202.55.2 attack
23/tcp
[2019-12-24]1pkt
2019-12-25 00:17:05
170.233.69.72 attackbotsspam
Dec 24 15:21:21 XXX sshd[25784]: Invalid user osmc from 170.233.69.72 port 59239
2019-12-25 00:06:35
181.48.245.122 attack
1433/tcp 1433/tcp
[2019-12-15/24]2pkt
2019-12-25 00:15:35
210.179.154.227 attackspambots
8083/tcp 8085/tcp 7001/tcp...
[2019-11-04/12-24]37pkt,12pt.(tcp)
2019-12-25 00:37:06

最近上报的IP列表

194.94.126.142 22.122.142.231 11.10.169.115 69.118.85.109
218.157.159.18 232.109.137.160 254.13.29.34 243.201.66.255
101.147.176.60 26.90.122.75 135.138.52.133 144.167.29.184
120.221.238.146 160.120.171.208 85.112.62.246 162.243.159.4
83.196.98.136 78.186.117.135 36.99.169.195 70.91.150.105